EIP-2026-113908

This exploit demonstrates a stored XSS vulnerability in WordPress Plugin Motopress Hotel Booking Lite 4.2.4. The attacker injects malicious JavaScript payloads into the 'title' and 'excerpt' fields of an accommodation type, which execute when the page is visited.